An open index of dependabot pull requests across open source projects.

github.com/docker/docker

Ecosystem:
go
Package URL:
pkg:golang/github.com/docker/docker
Total PRs:
5,467 Dependabot PRs
Latest PR:
9 days ago
Unique Repositories:
1,823 repositories
Unique Repos (30 days):
4 repositories
Security Advisories
Symlink Attack in Libcontainer and Docker Engine
GHSA-g7v2-2qxx-wjrw CVE-2015-3627 MODERATE published over 4 years ago • updated 33 minutes ago
Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot, which allows local ...
/sys/devices/virtual/powercap accessible by default to containers
GHSA-jq35-85cj-fj4p MODERATE published over 2 years ago • updated about 7 hours ago
Intel's RAPL (Running Average Power Limit) feature, introduced by the Sandy Bridge microarchitecture, provides software insights into hardware ener...
Moby firewalld reload makes published container ports accessible from remote hosts
GHSA-x4rx-4gw3-53p4 CVE-2025-54388 MODERATE published 10 months ago • updated 1 day ago
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various o...
Authz zero length regression
GHSA-v23v-6jw2-98fq CVE-2024-41110 CRITICAL published almost 2 years ago • updated 1 day ago
A security vulnerability has been detected in certain versions of Docker Engine, which could allow an attacker to bypass [authorization plugins (Au...
Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing
GHSA-xmmx-7jpf-fx42 MODERATE published almost 2 years ago • updated 1 day ago
### Impact In the OCI Distribution Specification version 1.0.0 and prior and in the OCI Image Specification version 1.0.1 and prior, manifest and i...
Recent PRs
chore(deps): bump the dependencies group across 1 directory with 6 updates

openfga/openfga #2798

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 7 months ago 2 comments
openfga
build(deps): bump the dependencies group in /systemtest with 5 updates

elastic/apm-server #19529

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 7 months ago 2 comments
elastic
chore: bump the golang group across 1 directory with 12 updates

AndiDog/skaffold #53

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 7 months ago 1 comment
AndiDog
chore: bump the engine group across 2 directories with 25 updates

sipsma/dagger #1166

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 7 months ago 1 comment
sipsma
deps(deps): bump the go-dependencies group with 3 updates

avivsinai/jenkins-cli #11

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 7 months ago 1 comment
avivsinai
Bump the go-modules group across 1 directory with 9 updates

picatz/dynabuf #47

28.5.0+incompatible → 28.5.2+incompatible Patch PR
Closed 7 months ago 2 comments
picatz
chore(deps): bump the minor group across 1 directory with 5 updates

containifyci/engine-ci #310

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 7 months ago 24 comments
containifyci
chore: bump the engine group across 2 directories with 22 updates

dagger/dagger #11378

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Closed 7 months ago 1 comment
dagger
chore(deps): bump the go-deps group with 5 updates

ahouab/Karpenter #52

28.4.0+incompatible → 28.5.2+incompatible Minor PR
Closed 7 months ago 1 comment
ahouab
build(deps): bump the moby group with 2 updates

apptainer/apptainer #3208

27.5.1+incompatible → 28.5.2+incompatible Major PR
Closed 7 months ago 2 comments
apptainer
Bump the go_modules group across 1 directory with 2 updates

devfile/registry-operator #111

25.0.6+incompatible → 25.0.13+incompatible Patch PR
Open 7 months ago 5 comments
devfile
Bump the go_modules group across 1 directory with 4 updates

Arkimking86/akim-hub #2

28.2.2+incompatible → 28.3.3+incompatible Minor PR
Open 7 months ago 1 comment
Arkimking86
Bump the go_modules group across 1 directory with 13 updates

spring-financial-group/helmfile #34

20.10.12+incompatible → 25.0.13+incompatible Major PR
Open 7 months ago 1 comment
spring-financial-group
Bump the go-docker-dependencies group with 2 updates

tektoncd/cli #2639

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 7 months ago 2 comments
tektoncd
Bump the go_modules group across 1 directory with 2 updates

anonim-01/mcp-gateway #1

28.2.2+incompatible → 28.3.3+incompatible Minor PR
Open 7 months ago 1 comment
anonim-01
chore: bump the engine group across 2 directories with 18 updates

sipsma/dagger #1161

28.5.1+incompatible → 28.5.2+incompatible Patch PR
Open 7 months ago 1 comment
sipsma
Package Details
Name: github.com/docker/docker
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/docker/docker
JSON API: View JSON
Security Advisories

33

Active advisories
CRITICAL 2
HIGH 10
MODERATE 18
LOW 3
View All golang Advisories
Package Information
Description:

Repository: https://github.com/docker/docker
Homepage: https://github.com/docker/docker
Latest Release: v28.2.2+incompatible
12 months ago
Dependent Repos: 40,103
Dependent Packages: 16,935
Ranking: Top 0.0289% by dependent repos Top 0.0137% by dependent pkgs
PR Status
Open 2,557 (46.8%)
Merged 824 (15.1%)
Closed 1,692 (30.9%)
PR Types
Major 2,063 (37.7%)
Minor 2,025 (37.0%)
Patch 983 (18.0%)